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AMENDMENTS TO THE CIAIM5 

Please cancel claims 1-2, and 5-10 without prejudice. 

1 3. (currently amended) The method of claim 1, further 

2 c omprisin g -t h e st e ps o£: A method for providing secure access to 

3 information held in a shared repository, comprising the steps of: 

4 storing, on a flfrtft server, information provided fry g fl^te 

5 owner 

6 providing, to the data owner , a data owner public kev and a 

7 data owner private kev. the data owner public key , and the data 

8 owner private kev being a first kev pair of a pu^li^-k^y 

9 cryptography system? 

10 providing the data owner public key to the data server: 

11 providing, tQ a Safes VSer, a flat3 ugfir public key and a data 

12 user private key, fcfag <tat3 upey pufrUq Key and the data user 

13 private kev being a second kev pair of the public -kev 

14 cryptography system; 

15 providing the data user public key to the data server; 

16 ggryajLrw the data user public key ^rpig the flfrt? WSer to the 

17 datfr <?wner r 

18 encrypting the_.data user public key bv the data owner, using 

19 the., data owner private kev, to provide an encrypted data user 

20 public kev; 
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1 grading, bv the data owner t o the data server, fcha encrypted, 

2 data user nnblic key *nrf a command that gives the date- server 

3 permission to transfer the inf ormation to the data user; 

4 decrypting the encrypted data user public key, us ing £h£ 

5 data owner public kev, to provi de a check word: 

6 comparing the check word and the data user public kev; 

7 if the step of comparing the check word and tfce <feta user 

8 public key indicate s that the check word and .the cfeta user P^Ji ic 

9 kev match, recording permission to transfer the information ia ^n 

10 access list: 

11 encrypting the data owner public key, by the data user, 

12 using the data user private key, to provide an encrypted data 

13 owner public key; 

14 sending, from the data user to the data server, the 

15 encrypted data owner public key and a request to transfer the 

16 information to the data user; 

17 decrypting the encrypted data owner public key using the 

18 data user public key, to provide a second check word; 

19 comparing the second check word and the data owner public 

20 key; 

21 if the step of comparing the second check word and the data 

22 owner public key indicates that the second check word and the 

23 data owner public key match, checking the access list to 

24 determine whether the data server has permission to transfer the 

RSW920020021US1 -3- 10/082 , 693 
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1 information; and, 

2 if the data server has permission, transferring the 

3 information from the data server to the data user. 

4 4. (original) The method of claim 3, further comprising the 

5 step of sending the data owner public key from the data owner to 

6 the data user. 
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